$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: ROTK5Ech0SJCbKjl9WTvUbaxNME48V39Pax8n/EMPww= Subject key identifier: 9B:55:CE:80:B0:B3:DA:0D:BA:18:4A:D3:F5:3B:1F:01:29:23:0B:CE Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 305A51C1F39EFE46875CCBDCC9B2FC702BC9E566 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 015C Signing time: Tue 03 Jun 2025 08:01:44 +0000 Manifest this update: Tue 03 Jun 2025 07:56:44 +0000 Manifest next update: Fri 06 Jun 2025 19:16:44 +0000 Files and hashes: 1: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 2: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 3: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 4: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 5: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 6: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 7: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: 3XbZf/5UAZLwd5A5yyFOZ8xxR1NYnmEZ+rPgrR4LAVc=) 8: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5a:51:c1:f3:9e:fe:46:87:5c:cb:dc:c9:b2:fc:70:2b:c9:e5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Jun 3 07:56:44 2025 GMT Not After : Jun 6 19:16:44 2025 GMT Subject: CN=9B55CE80B0B3DA0DBA184AD3F53B1F0129230BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:fd:48:b3:79:c4:dc:dc:44:df:c3:02:b7: fb:12:fe:3f:9d:3d:dc:08:36:64:02:5e:dc:86:93: f6:ad:e5:59:3b:05:bf:4f:a3:3d:33:fd:f0:4a:ea: 4c:6b:cc:78:2c:e1:92:65:c8:7f:16:75:78:94:30: c4:35:d3:e5:fc:8f:8e:2e:be:da:df:20:50:da:30: a2:01:86:93:3d:91:68:36:15:00:ae:28:72:d5:4f: 26:34:29:37:31:48:de:79:5a:df:82:a5:89:34:b8: 5e:09:a8:e4:b8:a1:80:05:6e:a0:b1:e5:b2:8e:17: a6:c9:83:ee:86:3f:03:05:c9:1b:57:9c:5a:f1:e9: 98:23:d7:03:2c:46:11:ce:7d:74:25:10:b6:56:38: aa:aa:4c:33:4d:d9:ed:b6:92:d4:d9:7d:fd:3b:fe: f9:db:09:54:18:0e:25:34:57:7a:99:f8:21:80:a4: 7c:14:8f:0b:6a:1e:84:eb:b6:11:05:09:bc:c3:97: d6:6d:36:99:64:39:04:a2:7c:8a:84:a6:f0:25:ea: 5f:91:57:b0:6e:af:47:d8:6b:2e:39:ee:44:27:04: da:09:01:16:d3:9d:f0:a1:9f:26:19:66:c7:74:f5: 49:62:95:f3:27:ef:2b:fc:a5:53:54:54:d2:8d:b6: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:55:CE:80:B0:B3:DA:0D:BA:18:4A:D3:F5:3B:1F:01:29:23:0B:CE X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c0:29:08:34:b8:30:30:a4:50:34:4d:6e:13:45:3a:23:f8: f4:14:ab:11:a6:c5:88:50:05:80:95:74:c4:6f:3b:47:4b:06: e4:6d:22:05:25:39:b9:a3:9b:bc:24:ab:78:58:83:a9:0d:47: 81:d2:13:85:6f:b7:cd:69:d0:10:2c:e2:b9:bd:67:83:ac:8b: 35:5c:85:1d:26:a7:c2:3a:49:d5:ab:7e:e7:20:41:b2:8b:fc: 79:a6:7b:e0:65:7a:81:7a:c4:17:de:b0:9f:76:0c:f5:f5:f1: c2:05:3d:b7:d3:46:99:44:aa:c7:76:f2:c2:8f:e6:19:c2:64: 51:95:09:af:b2:a8:1e:13:a8:6d:1d:a1:dc:b7:96:3f:69:a4: 7f:d3:b6:78:dc:b3:ca:ac:16:2e:af:a7:e0:f0:b4:20:b7:2a: 24:99:90:3d:5c:b5:82:ad:d1:26:ab:a0:07:b6:db:13:0e:24: 0c:76:fe:11:65:55:e1:b1:1a:92:b0:c9:9d:dc:5e:c3:44:c9: 37:6d:43:33:b7:b6:8b:45:a2:7d:a9:b7:34:1d:4b:08:40:f0: 36:2d:3c:71:58:e2:73:62:5a:fc:1d:c8:cb:f7:1a:0f:f8:ff: 39:ca:ba:05:48:24:7f:d0:47:4b:c1:88:ca:c9:44:dd:0a:6d: e2:50:6c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFpRwfOe/kaHXMvcybL8cCvJ5WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA2MDMwNzU2NDRaFw0yNTA2MDYxOTE2NDRaMDMxMTAvBgNV BAMTKDlCNTVDRTgwQjBCM0RBMERCQTE4NEFEM0Y1M0IxRjAxMjkyMzBCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnv1Is3nE3NxE38MCt/sS/j+d PdwINmQCXtyGk/at5Vk7Bb9Poz0z/fBK6kxrzHgs4ZJlyH8WdXiUMMQ10+X8j44u vtrfIFDaMKIBhpM9kWg2FQCuKHLVTyY0KTcxSN55Wt+CpYk0uF4JqOS4oYAFbqCx 5bKOF6bJg+6GPwMFyRtXnFrx6Zgj1wMsRhHOfXQlELZWOKqqTDNN2e22ktTZff07 /vnbCVQYDiU0V3qZ+CGApHwUjwtqHoTrthEFCbzDl9ZtNplkOQSifIqEpvAl6l+R V7Bur0fYay457kQnBNoJARbTnfChnyYZZsd09UlilfMn7yv8pVNUVNKNtqjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1XOgLCz2g26GErT9TsfASkjC84wHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXAKQg0uDAwpFA0TW4TRToj+PQUqxGmxYhQ BYCVdMRvO0dLBuRtIgUlObmjm7wkq3hYg6kNR4HSE4Vvt81p0BAs4rm9Z4OsizVc hR0mp8I6SdWrfucgQbKL/Hmme+BleoF6xBfesJ92DPX18cIFPbfTRplEqsd28sKP 5hnCZFGVCa+yqB4TqG0dody3lj9ppH/Ttnjcs8qsFi6vp+DwtCC3KiSZkD1ctYKt 0SaroAe22xMOJAx2/hFlVeGxGpKwyZ3cXsNEyTdtQzO3totFon2ptzQdSwhA8DYt PHFY4nNiWvwdyMv3Gg/4/znKugVIJH/QR0vBiMrJRN0KbeJQbF0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:24 2025 by rpki-client